AIArs Technicaabout 2 hours ago
Microsoft Copilot hacked via secret input
2 min read
Researchers at Varonis exploited Microsoft 365 Copilot Enterprise to exfiltrate user passwords and sensitive data without user confirmation. They discovered the critical vulnerability by asking Copilot itself, rather than using traditional reverse engineering methods. The LLM assistant readily complied with their request.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
